npm left-pad incident - Wikipedia
On March 22, 2016, software engineer Azer Koçulu took down the left-pad package that he had published to npm (a JavaScript package manager). Koçulu deleted the package following a dispute with Kik Messenger, in which the company forcibly took control of the package name kik. As a result, thousands of software projects that utilized left-pad as a dependency, including the Babel transcompiler and the React web framework, were unable to be built or installed. Technology corporations including Meta Platforms, PayPal, Netflix and Spotify were potentially affected after the removal of left-pad as their software products utilized the package in some form. Several hours after the package was removed from npm, the company behind the platform, npm, Inc, manually restored the package due to the widespread disruption caused by the incident. In the aftermath of the disruption, npm disabled the removal of a package if more than 24 hours have elapsed since its publishing date and at least one other p
npm left-pad incident - Wikipedia Jump to content From Wikipedia, the free encyclopedia 2016 incident involving the npm platform On March 22, 2016, programmer Azer Koçulu took down the left-pad package that he had published to npm (a package manager for JavaScript ). Koçulu deleted all his packages after a dispute with Kik Messenger , in which the company was granted control of the package name kik by npm, Inc. As a result, thousands of software projects that used left-pad as a dependency , including the Babel transcompiler and the React web framework , were unable to be built or installed. Th
Explore this link on the map →related reading
- NPM Install Everything, and the Complete and Utter Chaos That Followsboehs.org
- The Node-IPC Incidentnotes.ekzhang.com
- Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies | by Alex Birsan | Mediummedium.com
- How Notion pulled itself back from the brink of failure | Figma Blogfigma.com
- pketh.orgpketh.org
- Ghostty Is Leaving GitHub – Mitchell Hashimotomitchellh.com
- The Internet Demands Greatnessevery.to
- Pluralistic: Tiktok’s enshittification (21 Jan 2023) – Pluralistic: Daily links from Cory Doctorowpluralistic.net
- Behind The Scenes of Bun Install | Bun Blogbun.com
- We should all be using dependency cooldownsblog.yossarian.net
- What's Really Going On Inside Your node_modules Folder? - So...socket.dev
- Open Sources: Voices from the Open Source Revolutionoreilly.com